$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft File: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft (raw, json) Hash identifier: 9Uu4JU0mUsuYZo0OA3ovskgW6ErD7k1ugEeNtuNk4QY= Subject key identifier: C8:D7:AD:2B:26:89:93:2D:3D:27:89:EF:3E:7C:CB:A6:15:BF:2B:2D Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Certificate issuer: /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Certificate serial: 010D0C9F43285849BF3FF8192EFC9C05B50BCA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft Manifest number: 010D0C9F43285842C17DF555B8C50D6E9612E711 Signing time: Mon 05 May 2025 01:02:03 +0000 Manifest this update: Mon 05 May 2025 01:02:03 +0000 Manifest next update: Tue 06 May 2025 22:00:00 +0000 Files and hashes: 1: 07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (hash: 7P5LtKn5pXM8IjG8Kqy43nxA1SaUMFvKpCa1nw6gD7M=) 2: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl (hash: KYSFiS472Ar8lwLVACPb7DqTdAuHYIYRMMJpier5xgU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:f8:19:2e:fc:9c:05:b5:0b:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Validity Not Before: May 5 01:02:03 2025 GMT Not After : May 6 22:00:00 2025 GMT Subject: CN=f608a373-aeaf-4109-881b-81232c93dc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a1:d5:5b:57:5f:44:a1:03:39:db:a4:6a:08: 8c:6a:42:75:37:4b:94:57:ad:1c:87:fc:f1:43:d5: af:cb:12:45:47:ed:f7:24:fd:5e:bd:a3:92:28:2f: 5d:b1:50:e9:dd:05:b1:94:3c:da:9b:1f:d7:c5:4e: 46:16:f4:8d:fa:e4:fe:c1:a4:2f:32:9e:55:53:3a: 30:59:ff:41:c8:82:cd:8b:04:0e:2d:aa:76:a8:ae: ef:4d:33:a8:f6:d7:0f:ee:ae:4f:f0:dd:86:0e:68: da:c3:9a:75:e3:4a:64:2c:b5:a8:0e:c9:90:3f:63: 7a:c5:40:04:05:e5:5b:c0:ca:ae:ef:5b:75:3f:81: 47:44:14:fa:a1:36:5b:ad:b4:f4:ef:7b:74:15:57: 82:64:fa:58:64:33:5e:70:24:cf:0b:2e:ef:7b:33: a3:90:ba:44:6e:2d:32:28:11:fc:1b:0f:1d:8f:5a: 93:dc:bd:19:e8:0a:74:2d:cc:1b:6e:ed:f6:3b:bb: df:54:57:d6:3b:da:39:a4:49:9e:f4:bd:09:a6:b3: 22:4f:90:83:4a:e4:81:6f:e9:30:35:f0:c4:13:87: 99:7c:72:bb:04:b9:36:61:9d:73:ec:9d:fd:d7:93: 4f:b1:06:70:e6:c2:10:99:05:29:17:c1:ef:67:9e: b4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D7:AD:2B:26:89:93:2D:3D:27:89:EF:3E:7C:CB:A6:15:BF:2B:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl X509v3 Authority Key Identifier: keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f2:94:2f:e5:f8:f2:9f:be:61:b9:d2:96:56:38:af:bd:f6: f4:ed:3c:5e:48:a1:99:e3:80:e9:45:2d:24:63:f5:9b:e1:f8: 66:28:d2:5f:76:d7:a2:ac:f8:f2:03:a5:a9:89:60:cb:94:27: b2:79:11:ee:01:1d:90:ef:a2:97:bc:20:b4:1b:3e:3c:d2:c0: 77:ea:8c:bc:0f:fb:52:e0:0a:06:2a:df:ea:9c:96:31:81:60: c2:7b:43:87:2b:cc:df:3d:a6:f6:48:bf:00:3f:09:7c:ab:27: 45:0c:e4:bb:1f:92:06:2b:de:37:55:f3:db:7e:7d:7a:eb:9e: 66:a0:39:69:b4:ca:c9:f4:9e:d9:3c:8d:c2:ae:b8:e9:59:06: 72:56:32:95:75:f9:97:34:1c:94:1f:9c:12:83:44:ba:d6:c1: 9a:38:e5:19:8b:f2:8b:68:36:8c:50:a3:94:c5:f0:0e:22:c7: d3:a1:57:4c:2c:97:9e:b0:32:fa:8a:ef:36:31:25:66:a6:42: 84:99:2c:5b:46:cf:79:c3:9c:c5:b9:33:44:ad:5b:08:29:e7: 6b:3b:7f:d1:22:7c:56:d3:a5:0f:b9:0d:d7:51:87:db:5a:e5: e0:08:e5:83:c1:01:c7:b0:4a:b0:a9:13:8e:6d:7c:ce:50:03: df:2c:8c:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm/P/gZLvycBbULyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkw ZjRiMB4XDTI1MDUwNTAxMDIwM1oXDTI1MDUwNjIyMDAwMFowLzEtMCsGA1UEAxMk ZjYwOGEzNzMtYWVhZi00MTA5LTg4MWItODEyMzJjOTNkYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6HVW1dfRKEDOdukagiMakJ1N0uUV60ch/zx Q9WvyxJFR+33JP1evaOSKC9dsVDp3QWxlDzamx/XxU5GFvSN+uT+waQvMp5VUzow Wf9ByILNiwQOLap2qK7vTTOo9tcP7q5P8N2GDmjaw5p140pkLLWoDsmQP2N6xUAE BeVbwMqu71t1P4FHRBT6oTZbrbT073t0FVeCZPpYZDNecCTPCy7vezOjkLpEbi0y KBH8Gw8dj1qT3L0Z6Ap0Lcwbbu32O7vfVFfWO9o5pEme9L0JprMiT5CDSuSBb+kw NfDEE4eZfHK7BLk2YZ1z7J3915NPsQZw5sIQmQUpF8HvZ560eQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMjXrSsmiZMtPSeJ7z58y6YVvystMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUz ODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMmE1Mzg0OWMtNmY3Ny00 ZTY5LThiMzktYmNiODVkYTkwZjRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE1Mzg0OWMtNmY3Ny00ZTY5LThi MzktYmNiODVkYTkwZjRiLzJhNTM4NDljLTZmNzctNGU2OS04YjM5LWJjYjg1ZGE5 MGY0Yi5jcmwwHwYDVR0jBBgwFoAUz/guqqcZWw8Bit3a0J9Ruj1J1WowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4 NWRhOTBmNGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAI8pQv5fjyn75hudKWVjiv vfb07TxeSKGZ44DpRS0kY/Wb4fhmKNJfdteirPjyA6WpiWDLlCeyeRHuAR2Q76KX vCC0Gz480sB36oy8D/tS4AoGKt/qnJYxgWDCe0OHK8zfPab2SL8APwl8qydFDOS7 H5IGK943VfPbfn16655moDlptMrJ9J7ZPI3CrrjpWQZyVjKVdfmXNByUH5wSg0S6 1sGaOOUZi/KLaDaMUKOUxfAOIsfToVdMLJeesDL6iu82MSVmpkKEmSxbRs95w5zF uTNErVsIKedrO3/RInxW06UPuQ3XUYfbWuXgCOWDwQHHsEqwqROObXzOUAPfLIxd -----END CERTIFICATE-----Generated at Mon May 5 10:38:17 2025 by rpki-client